The Developers portal (one-career.com/developers) documents API v1, the JavaScript SDK, webhooks and the embeddable widgets, with an OpenAPI file for code generators.
- Organisation admins create API keys in Organisation console → Developers. A key is shown once, is stored hashed, can be limited to scopes, and can be rotated or revoked at any time.
- A key acts with its creator's permissions: if that admin leaves or loses the admin role, the key stops working.
- Candidate details follow OC-Reveal through the API too: names and contact details stay hidden until the candidate shares them. Documents and salary are never available.
- Webhooks are signed (OC-Signature). Verify the signature and the timestamp before trusting a payload. Failing endpoints are retried for about a day and paused after 3 days.
- Career-page widgets need no key: add the embed script and an <oc-jobs> tag. You can restrict which websites may show them.
- Candidates can share a profile card on their own website from Profile → Card shares, choose its fields and turn it off at any time.